News for hackers. Stuff that matters.

A comment on Deep Dive into XZ Utils Backdoor – Columbia Engineering Guest Lecture [video]. Parent comment

Re:Deep Dive into XZ Utils Backdoor – Columbia Engineering G... by throwaway4good on Tuesday April 30, 2024 @05:34AM (#40208956)
https://github.com/keithn/seatest

Which Jia Tan turns into "s-test".

[ Parent | on HN ]
Re:Deep Dive into XZ Utils Backdoor – Columbia Engineering G... by lyu07282 on Tuesday April 30, 2024 @06:04AM (#40209153)
They used test driven development for the backdoor development? Kind of hilarious ngl
[ Parent | on HN ]
Re:Deep Dive into XZ Utils Backdoor – Columbia Engineering G... by throwaway4good on Tuesday April 30, 2024 @07:11AM (#40209667)
Yes. Test is a perfect place to hide an attack - reviewers pay far less attention to test code than the (what they perceive to be) production code.
[ Parent | on HN ]